by Kastro
Paper/Archive/CVE-2023-6394

CVE-2023-6394

Red Hat Red Hat build of Quarkus 2.13.9 — Quarkus: graphql operations over websockets bypass

EPSS 0.8%CVSS 9.1
critical.is priorityof 100
39
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 56.7.567 × 2011.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and functionality outside of normal granted API permissions.

Affected

ProductAffectedFixed inSource
Red Hat build of Quarkus 2.13.9see advisory–CNA
Red Hat build of Quarkus 3.2.9.Finalsee advisory3.2.9.Final-redhat-00002CNA
Red Hat build of Quarkussee advisory–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
redhat (CNA)7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryaccess.redhat.com/errata/RHSA-2023:7612advisoryaccess.redhat.com/errata/RHSA-2023:7700refaccess.redhat.com/security/cve/CVE-2023-6394refbugzilla.redhat.com/show_bug.cgi?id=2252197